Описание
ELSA-2026-8352: bind security update (IMPORTANT)
[32:9.11.36-16.7]
- Denial of Service via maliciously crafted DNSSEC-validated zone (CVE-2026-1519)
Обновленные пакеты
Oracle Linux 8
Oracle Linux aarch64
bind
9.11.36-16.el8_10.7
bind-chroot
9.11.36-16.el8_10.7
bind-devel
9.11.36-16.el8_10.7
bind-libs
9.11.36-16.el8_10.7
bind-libs-lite
9.11.36-16.el8_10.7
bind-license
9.11.36-16.el8_10.7
bind-lite-devel
9.11.36-16.el8_10.7
bind-pkcs11
9.11.36-16.el8_10.7
bind-pkcs11-devel
9.11.36-16.el8_10.7
bind-pkcs11-libs
9.11.36-16.el8_10.7
bind-pkcs11-utils
9.11.36-16.el8_10.7
bind-sdb
9.11.36-16.el8_10.7
bind-sdb-chroot
9.11.36-16.el8_10.7
bind-utils
9.11.36-16.el8_10.7
python3-bind
9.11.36-16.el8_10.7
bind-export-devel
9.11.36-16.el8_10.7
bind-export-libs
9.11.36-16.el8_10.7
Oracle Linux x86_64
bind
9.11.36-16.el8_10.7
bind-chroot
9.11.36-16.el8_10.7
bind-devel
9.11.36-16.el8_10.7
bind-libs
9.11.36-16.el8_10.7
bind-libs-lite
9.11.36-16.el8_10.7
bind-license
9.11.36-16.el8_10.7
bind-lite-devel
9.11.36-16.el8_10.7
bind-pkcs11
9.11.36-16.el8_10.7
bind-pkcs11-devel
9.11.36-16.el8_10.7
bind-pkcs11-libs
9.11.36-16.el8_10.7
bind-pkcs11-utils
9.11.36-16.el8_10.7
bind-sdb
9.11.36-16.el8_10.7
bind-sdb-chroot
9.11.36-16.el8_10.7
bind-utils
9.11.36-16.el8_10.7
python3-bind
9.11.36-16.el8_10.7
bind-export-devel
9.11.36-16.el8_10.7
bind-export-libs
9.11.36-16.el8_10.7
Связанные CVE
Связанные уязвимости
If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive queries (see: https://kb.isc.org/docs/why-does-my-authoritative-server-make-recursive-queries). This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.46, 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.46-S1, and 9.20.9-S1 through 9.20.20-S1.
If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive queries (see: https://kb.isc.org/docs/why-does-my-authoritative-server-make-recursive-queries). This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.46, 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.46-S1, and 9.20.9-S1 through 9.20.20-S1.
If a BIND resolver is performing DNSSEC validation and encounters a maliciously crafted zone, the resolver may consume excessive CPU. Authoritative-only servers are generally unaffected, although there are circumstances where authoritative servers may make recursive queries (see: https://kb.isc.org/docs/why-does-my-authoritative-server-make-recursive-queries). This issue affects BIND 9 versions 9.11.0 through 9.16.50, 9.18.0 through 9.18.46, 9.20.0 through 9.20.20, 9.21.0 through 9.21.19, 9.11.3-S1 through 9.16.50-S1, 9.18.11-S1 through 9.18.46-S1, and 9.20.9-S1 through 9.20.20-S1.
Excessive NSEC3 iterations cause high CPU load during insecure delegation validation
If a BIND resolver is performing DNSSEC validation and encounters a ma ...